$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: LwAFlI1U3FYnwbt2GcBIbscthkAOWkfPQRhYbQpS5Ao= Subject key identifier: E0:3E:39:B5:60:85:C7:29:96:B7:39:0B:2C:0F:22:5D:02:DE:36:19 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: 01D5 Signing time: Mon 21 Sep 2026 03:45:23 +0000 Manifest this update: Mon 21 Sep 2026 03:45:23 +0000 Manifest next update: Mon 28 Sep 2026 03:45:23 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: KFda1gbl7zJlQCydv68FV8UcKiP1bXts+wLv/XMpfEc=) 2: BAFD2318E01B11F088B1D0FE636F56BC.roa (hash: nQQCvcP4Ab62KnLuqB+2dhOJymAwNDUrlbhEiMGFBCY=) 3: DAF8A746E01B11F097920A16646F56BC.roa (hash: ddW0Ynay18N2vbuqKbzQBFWoQChkJES43ys+thhHWto=) 4: 1B7430784BD411F1A6EB1F4394833773.roa (hash: oe2ZCXIQb92ROAH/nNeoR+2JzTpi9XU0AorFDG3Oc4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Sep 21 03:45:23 2026 GMT Not After : Sep 28 03:45:23 2026 GMT Subject: CN=6ab0a853-8404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:e7:64:8d:a3:14:ca:c5:f4:55:c3:1a:74: 5b:db:ff:ac:1f:9f:d7:ce:29:cf:3b:cf:b5:b1:a9: e5:cf:2e:d8:8c:60:cd:f7:8d:69:f6:af:c8:b3:e6: c3:48:d1:6e:f9:a0:1f:10:fa:3d:29:d9:2a:ae:3c: d2:13:8c:d3:25:bf:42:d5:68:b8:a9:30:c0:76:ed: 6c:8f:78:88:7a:5c:7a:ef:9f:f2:cc:c3:2f:37:a7: 82:bb:84:78:6f:81:9b:28:59:95:33:a4:75:8a:9c: a5:47:9f:5e:55:b5:0a:a0:d3:d4:0c:02:d4:ed:f8: 79:18:78:48:d9:9e:3f:81:20:5b:99:d0:b0:97:a3: 6b:e7:a2:5e:dc:94:71:3d:c0:b5:9d:5f:8f:a2:8d: ed:55:e4:fb:04:78:5b:7e:1a:1f:c4:91:5b:88:49: 71:02:45:2f:d6:c3:66:ca:18:64:08:a0:0a:1f:d9: 17:9e:d5:1a:29:dc:e6:bd:ac:c1:0c:08:e1:3f:7b: 87:7d:b6:82:35:25:95:e2:5b:f7:1a:53:fb:70:35: 24:e6:44:f7:bd:6c:1e:fe:4a:52:85:21:68:b9:83: cd:a9:29:d9:fa:6c:db:fb:bd:ee:b4:ed:52:3b:62: 23:81:ae:5b:a0:05:af:1a:b7:d3:63:3f:ee:16:e5: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3E:39:B5:60:85:C7:29:96:B7:39:0B:2C:0F:22:5D:02:DE:36:19 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:25:16:34:b1:26:31:c5:1e:dc:31:6f:bd:34:9c:11:28:56: f7:b3:ae:72:46:75:7f:5a:56:93:aa:24:32:67:17:f3:53:71: c9:46:ff:3b:ae:33:13:d6:8d:20:aa:22:1c:b3:aa:c9:31:3c: 02:a8:b0:ba:94:d4:1b:f3:8c:42:47:e7:c2:e8:88:ae:aa:fd: 8e:9e:3a:08:a8:59:a1:7d:e3:5a:b7:7f:d6:c2:9e:ef:ff:11: aa:d4:63:f9:77:e4:08:55:a2:02:f5:3b:ab:27:81:56:47:54: 46:b6:80:94:ff:cc:01:c1:5f:6e:1c:c0:73:67:8b:d4:0c:8f: e7:4a:3a:60:fb:ca:2f:e3:82:5a:92:8f:db:30:ad:03:d8:42: 59:cc:5c:05:50:d2:13:2f:0d:82:df:22:aa:71:07:1e:7f:1c: e4:6d:8d:0a:fa:a3:b7:db:b7:6c:8f:07:0c:4b:b4:c2:91:70: 5f:14:47:e8:85:e1:c2:3e:c4:b2:7d:dd:4b:6c:eb:55:c9:00: 5c:00:0e:10:78:dd:93:8e:d8:b2:16:08:60:1c:29:15:b3:35: c6:a0:05:70:ef:1c:9c:bb:e7:08:cd:e2:34:9d:67:81:39:8a: bf:c9:bb:4b:e2:18:20:6b:a5:1c:2f:9e:d3:95:b2:46:e4:8c: ea:fb:65:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjYwOTIxMDM0NTIzWhcNMjYwOTI4MDM0NTIzWjAYMRYwFAYD VQQDEw02YWIwYTg1My04NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynvnZI2jFMrF9FXDGnRb2/+sH5/XzinPO8+1sanlzy7YjGDN941p9q/Is+bD SNFu+aAfEPo9KdkqrjzSE4zTJb9C1Wi4qTDAdu1sj3iIelx675/yzMMvN6eCu4R4 b4GbKFmVM6R1ipylR59eVbUKoNPUDALU7fh5GHhI2Z4/gSBbmdCwl6Nr56Je3JRx PcC1nV+Poo3tVeT7BHhbfhofxJFbiElxAkUv1sNmyhhkCKAKH9kXntUaKdzmvazB DAjhP3uHfbaCNSWV4lv3GlP7cDUk5kT3vWwe/kpShSFouYPNqSnZ+mzb+73utO1S O2Ijga5boAWvGrfTYz/uFuVqFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOA+ObVg hccplrc5CywPIl0C3jYZMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAACUWNLEmMcUe3DFvvTScEShW97OuckZ1f1pWk6okMmcX81NxyUb/O64zE9aN IKoiHLOqyTE8AqiwupTUG/OMQkfnwuiIrqr9jp46CKhZoX3jWrd/1sKe7/8RqtRj +XfkCFWiAvU7qyeBVkdURraAlP/MAcFfbhzAc2eL1AyP50o6YPvKL+OCWpKP2zCt A9hCWcxcBVDSEy8Ngt8iqnEHHn8c5G2NCvqjt9u3bI8HDEu0wpFwXxRH6IXhwj7E sn3dS2zrVckAXAAOEHjdk47YshYIYBwpFbM1xqAFcO8cnLvnCM3iNJ1ngTmKv8m7 S+IYIGulHC+e05WyRuSM6vtlOw== -----END CERTIFICATE-----Generated at Mon Sep 21 22:21:48 2026 by rpki-client